
$ rpki-client -vvvf rpkica.twnic.tw/rpki/BREACH9/0/37BC55C5539971AFB8F6709E81C83C92EFDCA25E.mft
File: 37BC55C5539971AFB8F6709E81C83C92EFDCA25E.mft (raw, json)
Hash identifier: qRh2TVUItdegHCCBRKiRDMHHIpCXfGREoI3MhwZAXq0=
Subject key identifier: FC:15:CC:19:87:D0:1A:B1:19:0B:47:C5:B6:67:3D:7B:74:71:71:EF
Authority key identifier: 37:BC:55:C5:53:99:71:AF:B8:F6:70:9E:81:C8:3C:92:EF:DC:A2:5E
Certificate issuer: /CN=37BC55C5539971AFB8F6709E81C83C92EFDCA25E
Certificate serial: 4918498B27FD8E1C440C30AE754D556712C8CF9A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/37BC55C5539971AFB8F6709E81C83C92EFDCA25E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/BREACH9/0/37BC55C5539971AFB8F6709E81C83C92EFDCA25E.mft
Manifest number: B9
Signing time: Wed 23 Sep 2026 12:52:51 +0000
Manifest this update: Wed 23 Sep 2026 12:47:51 +0000
Manifest next update: Thu 24 Sep 2026 14:09:51 +0000
Files and hashes: 1: 3136332e3132382e37362e302f32332d3234203d3e2039393233.roa (hash: HcCrgyPQZ3iRC6R4Dmajnn3+LwU9SzxebMyYhDSTtJ0=)
2: 323030313a6466653a3a2f33322d3438203d3e203332353935.roa (hash: hjb2b9nxxhACSmVNPNNAjbUPMZe7O7X8gXcKsWiqcrg=)
3: 3136332e3132382e37362e302f32332d3234203d3e203332353935.roa (hash: K7N8j7vo0GWBUJ7KcOfXRKUesPEQd6IuNZ46Edb07vs=)
4: 37BC55C5539971AFB8F6709E81C83C92EFDCA25E.crl (hash: a2L5Ld16VyA8eAEGVZ9lfgiC6WlqOdL07bubdHmWUjE=)
5: 3136332e3132382e37372e302f32342d3234203d3e20313937353337.roa (hash: mlh0L4cv9acKEJ/qOZgzfu+K5lGDak9tmXUoIiAOhVA=)
6: 323030313a6466653a3a2f33322d3438203d3e2039393233.roa (hash: pgrYZOajKzQyKCkN+wjloDZT1L0F29LlCuW5K22DqWg=)
7: 3136332e3132382e37372e302f32342d3234203d3e20323032373336.roa (hash: TfpMHl3tbMw4P8soG2o7vLNtNm7H+J+gz5LksyActPg=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/BREACH9/0/37BC55C5539971AFB8F6709E81C83C92EFDCA25E.crl
rsync://rpkica.twnic.tw/rpki/BREACH9/0/37BC55C5539971AFB8F6709E81C83C92EFDCA25E.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/37BC55C5539971AFB8F6709E81C83C92EFDCA25E.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 08:30:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:18:49:8b:27:fd:8e:1c:44:0c:30:ae:75:4d:55:67:12:c8:cf:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37BC55C5539971AFB8F6709E81C83C92EFDCA25E
Validity
Not Before: Sep 23 12:47:51 2026 GMT
Not After : Sep 24 14:09:51 2026 GMT
Subject: CN=FC15CC1987D01AB1190B47C5B6673D7B747171EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b3:09:e6:cd:1f:68:74:87:69:98:fc:41:14:
13:8b:91:fe:fb:4f:df:10:cf:3e:76:64:db:9c:81:
db:e6:e8:17:0e:19:f1:57:b1:26:39:ef:c3:ec:aa:
0f:11:47:90:60:52:c9:ad:92:7c:1f:ea:c0:9d:a0:
5b:39:2c:5d:1f:97:6f:9d:18:26:ea:a2:8c:d3:19:
0c:0d:a7:a5:6e:17:e1:cc:c0:78:08:5a:6c:53:f6:
96:f3:20:44:de:b5:49:41:2a:81:da:e7:fb:de:8b:
f5:72:cd:7f:99:55:05:9f:a4:03:f3:a2:17:f6:31:
48:aa:37:ad:6b:2b:2c:ab:f7:86:90:d3:6e:55:7b:
ab:33:a0:ac:c9:44:82:32:a8:2d:c3:80:72:ac:c6:
f1:89:22:c1:c7:99:09:a6:96:c2:d5:48:32:68:69:
fe:c7:e3:4d:38:31:fc:68:cb:a3:e8:e1:e1:ce:9c:
38:d8:98:79:5b:4d:82:f6:32:47:83:5a:be:ea:6b:
56:94:2e:d9:b4:95:71:74:91:6e:a3:a0:5f:5e:d1:
cc:c0:d3:fe:45:75:99:6e:8d:13:05:98:bb:cb:c6:
b1:6b:e6:5b:2c:85:a6:d9:1b:3b:4d:39:f7:15:ef:
04:7f:e2:4c:c4:b4:74:ae:85:d0:f7:3c:65:e5:95:
f1:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:15:CC:19:87:D0:1A:B1:19:0B:47:C5:B6:67:3D:7B:74:71:71:EF
X509v3 Authority Key Identifier:
keyid:37:BC:55:C5:53:99:71:AF:B8:F6:70:9E:81:C8:3C:92:EF:DC:A2:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/BREACH9/0/37BC55C5539971AFB8F6709E81C83C92EFDCA25E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/37BC55C5539971AFB8F6709E81C83C92EFDCA25E.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/BREACH9/0/37BC55C5539971AFB8F6709E81C83C92EFDCA25E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:ed:66:56:27:b9:c2:13:76:82:9a:4b:8b:5d:53:bf:a1:f3:
89:d8:f1:ba:51:2f:17:77:43:fc:27:9b:7d:6c:d0:d3:bd:d4:
b2:d9:91:13:38:ea:26:e7:e1:83:31:b6:01:77:7a:8e:83:69:
51:41:13:9e:aa:1e:16:9c:7a:bb:6b:25:55:7b:59:bb:0d:89:
ce:93:68:9f:af:3a:d4:6b:7f:ee:22:f0:dd:28:7d:84:6d:5e:
45:3f:bd:3f:14:08:a2:29:ef:c0:77:4a:ab:c4:ea:05:93:bd:
c4:3b:78:b9:35:8b:44:67:a8:cc:d9:2b:8b:16:fd:ee:2c:09:
b6:72:35:83:64:6a:07:49:f0:8b:c9:c6:f5:5a:70:e5:54:e4:
a6:71:4d:83:a3:6a:7a:4f:6e:9e:9c:a9:b5:52:91:ea:39:84:
5c:c0:2c:45:5b:12:dd:db:1c:dd:e7:55:a0:fc:10:5a:8d:55:
db:db:74:8b:4b:37:6a:91:b8:4e:81:65:7f:c1:98:23:e4:f4:
d3:92:7d:f6:d9:5b:76:70:07:21:9f:11:09:52:27:5b:08:17:
63:ae:e4:77:2b:94:51:a5:30:9b:79:bb:9d:c3:a2:8f:36:38:
c9:1d:7e:a7:89:96:ed:4e:91:14:f5:89:06:84:d1:64:b0:56:
c8:bc:12:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:08:34 2026 by rpki-client